3 ms·
wow... no comments? I'm not a crypto guy, but I am very curious why is it that this vulnerability does not apply to other services used here in the US. could an
by somid3 9y ago
wow... no comments? I'm not a crypto guy, but I am very curious why is it that this vulnerability does not apply to other services used here in the US. could anyone explain this?
- OJFord 9y agoIt does, probably the Estonian ID cards are just used as an example as the most widespread/high profile deployment. https://www.yubico.com/support/security-advisories/ysa-2017-01/ https://www.yubico.com/support/security-advisories/ysa-2017-...
- j_s 9y agoInfineon RSA Key Generation Issue | https://news.ycombinator.com/item?id=15481334 https://news.ycombinator.com/item?id=15481334 (2017Oct:238points,87comments) Return of Coppersmith’s Attack [ROCA]: Vulnerable RSA Generation | https://news.ycombinator.com/item?id=15482441 https://news.ycombinator.com/item?id=15482441 (2017Oct:142points,22comments)
- SolarNet 9y agoBecause in the U.S. it's only used in private solutions. No public facing systems in the U.S. are even secure enough for this vulnerability to affect it.